IAM Permissions Example

gistfile1.json

{
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListAllMyBuckets",
        "s3:ListBucket"
      ],
      "Resource": "arn:aws:s3:::*"
    },
    {
      "Action": [
        "s3:PutObject",
        "s3:PutObjectAcl",
        "s3:GetObject",
        "s3:GetObjectAcl",
        "s3:DeleteObject",
        "s3:DeleteObjectAcl"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::MY-BACKUP-BUCKET/*"
      ]
    }
  ]
}

Need to append "s3:ListBucket" to your first list of actions, to change the output to:

{
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:ListAllMyBuckets",
"s3:ListBucket"
],
"Resource": "arn:aws:s3:::"
},
{
"Action": [
"s3:PutObject",
"s3:PutObjectAcl"
],
"Effect": "Allow",
"Resource": [
"arn:aws:s3:::MY-BACKUP-BUCKET/"
]
}
]
}

Cool, thank you. Change is made.

To restore your data, you will need to add the following:

    "s3:GetObject",
    "s3:GetObjectAcl"

You will need to add that in the block:

 "Action": [
    "s3:PutObject",
    "s3:PutObjectAcl"
  ]

For MongoHQ to manage your files (i.e. delete older versions, you will need to add the following:

    "s3:DeleteObject",
    "s3:DeleteObjectAcl"

You will need to add that in the block:

   "Action": [
      "s3:PutObject",
      "s3:PutObjectAcl"
    ],

Thanks ... made these changes.

Confirmed there is a typo in this gist:

Replace:

"s3:ListBuckets"

with

 "s3:ListBucket"